$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b17fbe7e-584b-303f-be3e-83f9242e88df.roa File: b17fbe7e-584b-303f-be3e-83f9242e88df.roa (raw, json) Hash identifier: VEtMB+djVmuZM6W4H9vHDVTDkdGXlP3KwsXty2EHekQ= Subject key identifier: 81:92:AA:B0:FA:31:5F:F0:F3:5C:21:9B:11:72:6D:B0:7E:92:27:75 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A168AC37ECC42A8A8AFF52080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b17fbe7e-584b-303f-be3e-83f9242e88df.roa Signing time: Thu 05 Jun 2025 07:28:08 +0000 ROA not before: Thu 05 Jun 2025 07:28:08 +0000 ROA not after: Wed 03 Sep 2025 07:28:08 +0000 asID: 208485 IP address blocks: 206.123.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:16:8a:c3:7e:cc:42:a8:a8:af:f5:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 5 07:28:08 2025 GMT Not After : Sep 3 07:28:08 2025 GMT Subject: CN=1a4d0868-ef3d-4eb8-8fd6-390fb34e615e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:9f:b2:80:4c:f8:89:75:81:8a:89:1b:fe: bf:88:9b:d1:a0:88:e4:a6:96:21:4f:7b:ed:3b:32: 0a:74:cf:e0:92:36:ec:f5:cd:e2:d7:30:14:92:98: 63:bc:eb:a0:41:4c:c6:53:c6:0e:5c:f5:c4:3b:69: cf:86:eb:7a:4b:08:2a:6e:90:3c:b1:0b:34:da:23: 71:19:47:52:21:5c:28:15:af:8d:ff:d5:ba:34:58: 3f:75:a5:b8:d1:39:e2:ff:1f:5d:a0:8f:76:59:d8: c4:1e:0a:93:3e:ad:b9:db:93:c3:fc:55:db:33:c2: 2a:ef:f5:04:08:ab:e4:a3:c7:67:f8:cb:ff:24:f8: 2d:34:ef:64:14:0a:ea:ed:a9:bc:8c:1b:7d:d6:13: 5a:4e:5b:08:a9:fa:c5:07:51:41:6f:dd:71:8a:bb: 55:d7:35:23:f7:6e:ec:fe:4a:fe:87:8e:0c:c9:4f: dc:63:0d:8b:17:fb:08:3e:f9:83:ee:d2:e6:38:db: 43:c8:1d:3e:8c:3f:1d:dc:4f:73:7c:10:f5:5c:ff: 8a:34:38:bc:21:b4:5d:e6:86:16:4d:4b:46:b5:aa: 93:cd:05:07:9e:2d:e1:d4:c1:5c:c6:d6:f2:b4:f0: cf:b1:cb:15:50:b7:b8:d7:02:d5:95:09:92:e9:04: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:92:AA:B0:FA:31:5F:F0:F3:5C:21:9B:11:72:6D:B0:7E:92:27:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b17fbe7e-584b-303f-be3e-83f9242e88df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:32:9e:f1:a8:e2:7f:0e:d0:6a:5f:aa:00:91:c2:5e:e4:e9: 53:b1:6f:38:7a:c1:81:7b:c2:fa:14:e0:b7:f5:88:07:52:d4: 86:ef:e0:60:e0:e4:03:35:a3:cf:97:c2:c8:80:6e:34:e4:da: 6d:ce:c9:f7:94:22:7c:27:17:55:99:dd:e9:57:d6:c2:25:77: 05:5a:db:39:5a:04:c9:b9:b1:7c:20:36:fd:73:81:96:5f:a4: a2:a7:c8:0d:79:a8:bc:68:59:98:a1:2c:58:5c:31:d3:79:67: 3c:91:24:3b:ce:b7:0b:50:c2:e6:39:03:13:65:04:b9:73:e6: 3d:12:36:98:ae:39:cd:b4:6c:91:76:e0:11:1b:3e:33:6d:e9: 7c:95:7a:1d:20:07:98:d6:da:12:dd:58:9c:98:5d:da:b8:68: 6d:6e:fe:5f:0c:cd:fa:ff:e8:43:25:ee:2e:10:53:46:14:bd: ec:58:c2:fd:09:6f:83:5c:c9:49:76:5f:bc:07:1f:ad:21:57: 53:10:03:51:7b:e9:f3:0d:3b:e7:2a:e3:c6:23:63:4d:ae:ac: 36:ca:36:17:80:51:06:9b:de:b5:b0:cf:f8:2a:6e:67:f6:28: 0b:bf:34:74:df:93:f2:f6:95:50:d6:99:20:8b:bf:dc:ba:09: 12:d2:1b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoWisN+zEKoqK/1IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwNTA3MjgwOFoXDTI1MDkwMzA3MjgwOFowLzEtMCsGA1UEAxMk MWE0ZDA4NjgtZWYzZC00ZWI4LThmZDYtMzkwZmIzNGU2MTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqefsoBM+Il1gYqJG/6/iJvRoIjkppYhT3vt OzIKdM/gkjbs9c3i1zAUkphjvOugQUzGU8YOXPXEO2nPhut6SwgqbpA8sQs02iNx GUdSIVwoFa+N/9W6NFg/daW40Tni/x9doI92WdjEHgqTPq2525PD/FXbM8Iq7/UE CKvko8dn+Mv/JPgtNO9kFArq7am8jBt91hNaTlsIqfrFB1FBb91xirtV1zUj927s /kr+h44MyU/cYw2LF/sIPvmD7tLmONtDyB0+jD8d3E9zfBD1XP+KNDi8IbRd5oYW TUtGtaqTzQUHni3h1MFcxtbytPDPscsVULe41wLVlQmS6QRHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGSqrD6MV/w81whmxFybbB+kid1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjE3ZmJlN2UtNTg0Yi0z MDNmLWJlM2UtODNmOTI0MmU4OGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUynvGo4n8O0GpfqgCRwl7k6VOxbzh6wYF7wvoU4Lf1iAdS1Ibv4GDg 5AM1o8+XwsiAbjTk2m3OyfeUInwnF1WZ3elX1sIldwVa2zlaBMm5sXwgNv1zgZZf pKKnyA15qLxoWZihLFhcMdN5ZzyRJDvOtwtQwuY5AxNlBLlz5j0SNpiuOc20bJF2 4BEbPjNt6XyVeh0gB5jW2hLdWJyYXdq4aG1u/l8Mzfr/6EMl7i4QU0YUvexYwv0J b4NcyUl2X7wHH60hV1MQA1F76fMNO+cq48YjY02urDbKNheAUQab3rWwz/gqbmf2 KAu/NHTfk/L2lVDWmSCLv9y6CRLSG0s= -----END CERTIFICATE-----Generated at Sun Jun 15 05:05:00 2025 by rpki-client